$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa File: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json) Hash identifier: MTWTrKDM7G0I/0QWFcJbd5LJBi+j9GLIC245R9do0UA= Subject key identifier: 2F:91:0D:69:98:F1:2C:39:87:9F:B6:D7:C6:AE:FE:61:A1:79:4A:77 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584EC371CAE679CAC7A1468A1400 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46687 IP address blocks: 64.82.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:ca:e6:79:ca:c7:a1:46:8a:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=8f58dcd6-5f6d-4e4d-a865-709a1ab80fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:44:70:24:50:ae:3e:d7:39:97:65:63:11: 25:51:ea:7f:f2:58:b9:94:0a:a3:14:d8:26:5e:4b: be:09:fd:f0:f5:b8:d0:6a:d2:e3:1f:d5:9e:bb:93: ae:3d:34:0b:23:a0:04:6a:9e:c4:cd:fe:fd:a1:d0: 67:23:6a:b8:5e:a5:1a:d8:44:3e:73:80:36:6d:d1: b7:6e:0b:34:60:7c:27:c6:06:00:ec:5b:95:8e:e5: 67:8f:8c:78:18:91:ed:06:58:1d:4b:6f:02:03:df: bd:1f:98:10:bc:5f:3a:ac:70:50:a8:a3:1c:35:ff: 9f:3d:d3:59:db:99:c0:66:73:41:71:4b:35:af:7f: 04:59:13:40:b2:25:b2:d3:2d:b8:56:27:a2:aa:f7: 7d:1b:f6:15:29:c9:e4:3d:72:5d:6a:06:4e:62:a8: 08:46:d6:d8:dc:c2:db:16:e8:a5:c8:1b:cc:12:5f: b4:b2:51:3e:b8:dd:ab:e9:43:bd:18:fa:74:d0:b5: 71:6e:20:d2:c7:d7:d8:b2:a6:9d:48:0a:54:17:82: 54:34:73:22:cc:60:32:6d:b0:80:b8:9d:d4:af:47: 17:79:a2:18:6a:98:a9:96:4e:90:21:55:f5:40:31: 69:e8:d3:ca:2b:0b:dd:c3:b0:5f:9c:d7:7c:db:5d: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:0D:69:98:F1:2C:39:87:9F:B6:D7:C6:AE:FE:61:A1:79:4A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 64.82.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:64:d6:48:f7:61:28:74:fa:6b:81:e7:e1:bb:7f:f5:6b:04: ba:b1:50:37:ae:a5:00:4d:65:b9:0b:fc:7d:0d:9e:fc:04:c6: 11:9b:11:c4:18:97:28:58:bc:31:a4:4f:e5:4a:fc:b2:d4:20: 16:11:07:39:6a:36:20:cc:ce:03:09:b4:7e:c5:d3:66:db:14: 12:3f:34:d5:55:a7:72:66:74:78:fb:d1:70:95:d6:2e:be:e0: ee:8e:eb:9d:58:db:0d:43:fd:99:7c:63:37:32:bd:78:2c:7a: 33:f0:7c:86:af:24:ad:41:55:f3:3c:e7:8e:b3:e9:c7:1e:42: 77:46:67:ef:7a:f5:c8:dc:f9:c4:d0:67:3c:2d:a6:18:cd:d4: a5:6d:18:44:85:cb:fa:13:a3:a5:e3:e6:de:b8:13:2d:d8:64: ab:a6:5b:cb:1c:22:84:56:a6:c5:27:e1:3b:a5:4a:b5:16:21: 92:20:00:8e:61:21:b3:8e:8c:d7:62:1d:6a:54:04:23:cf:2d: 40:1b:c1:10:a5:3e:bc:4a:9f:8a:78:03:f8:61:42:5f:32:92: 91:df:9f:9b:87:5b:a2:9c:ca:37:e6:4a:e0:17:28:a3:2c:04: 87:d9:b5:cc:fc:0c:22:95:70:f7:ea:3d:c4:ec:27:2e:c5:ed: 76:1c:a1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccrmecrHoUaKFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OGY1OGRjZDYtNWY2ZC00ZTRkLWE4NjUtNzA5YTFhYjgwZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnREcCRQrj7XOZdlYxElUep/8li5lAqjFNgm Xku+Cf3w9bjQatLjH9Weu5OuPTQLI6AEap7Ezf79odBnI2q4XqUa2EQ+c4A2bdG3 bgs0YHwnxgYA7FuVjuVnj4x4GJHtBlgdS28CA9+9H5gQvF86rHBQqKMcNf+fPdNZ 25nAZnNBcUs1r38EWRNAsiWy0y24Vieiqvd9G/YVKcnkPXJdagZOYqgIRtbY3MLb FuilyBvMEl+0slE+uN2r6UO9GPp00LVxbiDSx9fYsqadSApUF4JUNHMizGAybbCA uJ3Ur0cXeaIYapiplk6QIVX1QDFp6NPKKwvdw7BfnNd82120wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+RDWmY8Sw5h5+218au/mGheUp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYTY0YmJmYWEtYTE0Ny0z OWY5LWJmMWYtZGJhZTk5NzFkOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtk1kj3YSh0+muB5+G7f/VrBLqxUDeupQBNZbkL/H0NnvwExhGbEcQY lyhYvDGkT+VK/LLUIBYRBzlqNiDMzgMJtH7F02bbFBI/NNVVp3JmdHj70XCV1i6+ 4O6O651Y2w1D/Zl8YzcyvXgsejPwfIavJK1BVfM8546z6cceQndGZ+969cjc+cTQ ZzwtphjN1KVtGESFy/oTo6Xj5t64Ey3YZKumW8scIoRWpsUn4TulSrUWIZIgAI5h IbOOjNdiHWpUBCPPLUAbwRClPrxKn4p4A/hhQl8ykpHfn5uHW6KcyjfmSuAXKKMs BIfZtcz8DCKVcPfqPcTsJy7F7XYcoZE= -----END CERTIFICATE-----Generated at Tue Aug 25 20:22:20 2026 by rpki-client